Important: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Exploit for CVE-2026-98432

linux-tcp-uaf-cve-2026-98432 CVE-2026-98432 response kit...

Exploit for CVE-2026-98432

cve-2026-98432-check Read-only shell check for whether a Linu...

Moderate: Red Hat Security Advisory: libkcapi security update

An update for libkcapi is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...

Important: Red Hat Security Advisory: libsoup security update

An update for libsoup is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: tipc: require net admin for TIPCv2 netlink mutators

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC version 2 component. This vulnerability allows a local unprivileged attacker to bypass administrative permission checks when performing network link operations. Consequently, the attacker can modify critical TIPC...

kernel: af_unix: Fix UAF read of tail->len in unix_stream_data_wait()

A flaw was found in the Linux kernel's afunix UNIX domain sockets component. A race condition in the unixstreamdatawait function allows a local attacker to trigger a Use-After-Free UAF vulnerability. This occurs because the function peeks at a socket buffer without proper locking, enabling anothe...

kernel: scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE

A flaw was found in the Linux kernel's iSCSI target core. This use-after-free vulnerability occurs in the corescsi3emulateproregisterandmove function. When processing iSCSI TransportIDs, a memory buffer is prematurely unmapped while still being referenced, particularly when the parameter list spa...

kernel: smb: client: bound dirent name against end of SMB response in cifs_filldir

A flaw was found in the Linux kernel's SMB Server Message Block client subsystem. When a user lists files in a directory on a mounted share, a malicious SMB server can return a crafted directory entry with an oversized filename length. Because the client fails to verify that the filename remains...

kernel: ipv6: exthdrs: refresh nh after handling HAO option

A flaw was found in the Linux kernel's IPv6 extension header processing. When processing the Home Address Option HAO, the cached network header pointer may become invalid if the packet's memory is reallocated. This can lead to incorrect parsing of subsequent IPv6 Type-Length-Value TLV options,...

kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

A flaw was found in the Linux kernel's handling of IPv6 extended headers. Specifically, the ipv6hopjumbo function, which processes jumbo payloads, can modify internal packet buffer skb pointers. However, the network header nh pointer is not recomputed after these modifications. This oversight cou...

Security update for the Linux Kernel (Live Patch 48 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.194 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-68426:...

CVE-2026-118593

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a localbh imbalance in seg6inputcore, where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of servi...

Security update for the Linux Kernel (Live Patch 47 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.187 fixes various security issues: The following security issues were fixed: CVE-2026-53016: crypto: ccp - copy IV using skcipher ivsize bsc1269766. CVE-2026-68426: xfrm: fix stale skb-prev after async crypto steals a GSO segment...

Exploit for CVE-2026-98432

Check · Exploit · Detection · PCAP · Impact · Write-up ---...

PT-2026-135529

In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: error damos commit quota goal for zero target value Patch series "mm/damon: move zero damos quota target value handling to the core layer". Having zero DAMOS quota target value can cause division by zero. DAMON API...

PT-2026-135518

In the Linux kernel, the following vulnerability has been resolved: io uring/wait: don't spin on a stuck overflow list As long as IO CHECK CQ OVERFLOW BIT is set, io cqring wait schedule returns right away, before it gets to look at signals or arms the timeout, for io cqring wait to flush the...

Photon OS 5.0: Linux PHSA-2026-5.0-92-1000

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2026-5.0-92-1000. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Linux kernel DoS

The vulnerability in the fs/erofs/zmap.c component of the Linux kernel system is related to insufficient resource control during its existence. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel skb_zerocopy Privilege Escalation

The vulnerability in the skbzerocopy function within net/core/skbuff.c on the Linux kernel system is related to memory initialization errors. Exploiting this vulnerability may allow an attacker to escalate their privileges...